<div>
Alex,</div><div><br></div><div>I believe, this is because you are using self signed certificates and the signing certificate provided in the bundle is not added to trusted certificates.</div><div>
<p style="font-family: Helvetica; font-size: 10pt; margin-bottom: 0cm;">
</p><p style="font-family: Helvetica; font-size: 10pt; margin-bottom: 0cm;">
</p><p style="margin-bottom: 0cm;">
</p><p style="margin-bottom: 0cm"><font color="#000000"><font face="Helvetica, sans-serif"><font style="font-size: 9pt">Kind
regards,
<br>Radek
Gruchalski<br>
</font></font></font><font face="Helvetica, sans-serif"><font style="font-size: 9pt"><a href="mailto:radek@gruchalski.com">radek@gruchalski.com</a><a href="mailto:radek@gruchalski.com">
</a></font></font><font color="#0084d1"><font face="Helvetica, sans-serif"><font style="font-size: 9pt"><br></font></font></font><a href="http://de.linkedin.com/in/radgruchalski/"><font color="#0084d1"><font face="Helvetica, sans-serif"><font style="font-size: 9pt">de.linkedin.com/in/radgruchalski/</font></font></font></a><font color="#000000"><font face="Helvetica, sans-serif"><font style="font-size: 9pt"><br><br></font></font></font><font color="#878787"><font face="Helvetica, sans-serif"><font style="font-size: 8pt"><b>Confidentiality:<br></b></font></font></font><font color="#878787"><font face="Helvetica, sans-serif"><font style="font-size: 8pt">This
communication is intended for the above-named person and may be
confidential and/or legally privileged.<br>If it has come to you in
error you must take no action based on it, nor must you copy or show
it to anyone; please delete/destroy and inform the sender
immediately.</font></font></font></p></div>
<p style="color: #A0A0A8;">On Monday, 2 March 2015 at 21:46, Alex Hudich wrote:</p>
<blockquote type="cite" style="border-left-style:solid;border-width:1px;margin-left:0px;padding-left:10px;">
<span><div><div><div>Hi</div><div><br></div><div>I’ve got some strange errors when I try to make SSL connection to a web-site with peer verification on. </div><div><br></div><div>Here’s an example:</div><div><br></div><div>I’ve downloaded PEM certificates from <a href="https://raw.githubusercontent.com/bagder/ca-bundle/master/ca-bundle.crt">https://raw.githubusercontent.com/bagder/ca-bundle/master/ca-bundle.crt</a></div><div><br></div><div>Then I start erl and run a command ssl:start().</div><div><br></div><div>Then I try to connect somewhere (I renamed ca-bundle.crt file to a cacert.pem):</div><div><br></div><div>2> ssl:connect( "<a href="http://t.ileads.ru">t.ileads.ru</a>", 443, [{verify,verify_peer},{cacertfile,"cacert.pem"}]).</div><div><br></div><div>=ERROR REPORT==== 2-Mar-2015::23:32:15 ===</div><div>SSL: certify: ssl_handshake.erl:1403:Fatal error: handshake failure</div><div>{error,{tls_alert,"handshake failure"}}</div><div><br></div><div><br></div><div>Without peer verification everything went ok. </div><div><br></div><div>What’s wrong? Or maybe I do something wrong?</div><div><br></div><div>--</div><div>cul8er, Alex.</div><div>_______________________________________________</div><div>erlang-questions mailing list</div><div><a href="mailto:erlang-questions@erlang.org">erlang-questions@erlang.org</a></div><div><a href="http://erlang.org/mailman/listinfo/erlang-questions">http://erlang.org/mailman/listinfo/erlang-questions</a></div></div></div></span>
</blockquote>
<div>
<br>
</div>